ZEISS Cybersecurity and Data Privacy Governance Program

Ensure your ZEISS device software and operating system are regularly updated to patch known vulnerabilities.

ZEISS devices employ username and password-based authentication for both Windows OS and the device application. They support multiple user roles with varying levels of access, including administrator, service, and general user accounts, ensuring that only authorized personnel can access sensitive data and system configurations.

ZEISS devices come with enhanced security settings enabled by default, which include firewall rules, screen saver/lock screen configurations, Windows Defender, and password policies. These settings help minimize the attack surface and protect the device from unauthorized access.

ZEISS device software logs important user activities, errors, and network requests, creating an audit trail that can be used for security monitoring and forensic analysis. This includes logging of logon/logoff events, data modifications, and remote service activities.

Patient data stored on ZEISS devices is secured with a secret password, and the device is compatible with BitLocker for drive encryption. Additionally, communication between your ZEISS device and DICOM solutions can be encrypted using DICOM TLS, ensuring secure data transmission.